40 commits

Author	SHA1	Message	Date
Paul Bakker	915275ba78	- Revamped x509_verify() and the SSL f_vrfy callback implementations	2012-09-28 07:10:55 +00:00
Paul Bakker	0a59707523	- Added simple SSL session cache implementation ... - Revamped session resumption handling	2012-09-25 21:55:46 +00:00
Paul Bakker	d0f6fa7bdc	- Sending of handshake_failures during renegotiation added ... - Handle two legacy modes differently: SSL_LEGACY_BREAK_HANDSHAKE and SSL_LEGACY_NO_RENEGOTIATION	2012-09-17 09:18:12 +00:00
Paul Bakker	48916f9b67	- Added Secure Renegotiation (RFC 5746)	2012-09-16 19:57:18 +00:00
Paul Bakker	8d914583f3	- Added X509 CA Path support	2012-06-04 12:46:42 +00:00
Paul Bakker	4248823f43	- Updated to handle x509parse_crtfile() positive return values	2012-05-16 08:21:05 +00:00
Paul Bakker	0b22e3e989	- Print return codes properly	2012-04-18 14:23:29 +00:00
Paul Bakker	570267f01a	- print error string in useful format	2012-04-10 08:22:46 +00:00
Paul Bakker	fab5c829e7	- Added support for NULL cipher (POLARSSL_CIPHER_NULL_CIPHER) and weak ciphersuites (POLARSSL_ENABLE_WEAK_CIPHERSUITES). They are disabled by default!	2012-02-06 16:45:10 +00:00
Paul Bakker	13eb9f01cf	- Added error exit code	2012-02-06 15:35:10 +00:00
Paul Bakker	69e095cc15	- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it. ... - As a consequence all error code that were positive were changed. A lot of MALLOC_FAILED and FILE_IO_ERROR error codes added for different modules. - Programs and tests were adapted accordingly	2011-12-10 21:55:01 +00:00
Paul Bakker	508ad5ab6d	- Moved all examples programs to use the new entropy and CTR_DRBG	2011-12-04 17:09:26 +00:00
Paul Bakker	6c0ceb3f9a	- Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error	2011-12-04 12:24:18 +00:00
Paul Bakker	a3d195c41f	- Changed the used random function pointer to more flexible format. Renamed havege_rand() to havege_random() to prevent mistakes. Lots of changes as a consequence in library code and programs	2011-11-27 21:07:34 +00:00
Paul Bakker	cce9d77745	- Lots of minimal changes to better support WINCE as a build target	2011-11-18 14:26:47 +00:00
Paul Bakker	5690efccc4	- Fixed a whole bunch of dependencies on defines between files, examples and tests	2011-05-26 13:16:06 +00:00
Paul Bakker	f357131a7b	- Gather data until server gives EOF	2011-05-20 12:32:35 +00:00
Paul Bakker	831a755d9e	- Changed behaviour of net_recv(), ssl_fetch_input() and ssl_read(). net_recv() now returns 0 on EOF instead of POLARSSL_ERR_NET_CONN_RESET. ssl_fetch_input() returns POLARSSL_ERR_SSL_CONN_EOF on an EOF from its f_recv() function. ssl_read() returns 0 if a POLARSSL_ERR_SSL_CONN_EOF is received after the handshake. ... - Network functions now return POLARSSL_ERR_NET_WANT_READ or POLARSSL_ERR_NET_WANT_WRITE instead of the ambiguous POLARSSL_ERR_NET_TRY_AGAIN	2011-05-18 13:32:51 +00:00
Paul Bakker	23986e5d5d	- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops	2011-04-24 08:57:21 +00:00
Paul Bakker	5193688682	- Added force_ciphersuite option to ssl_client2 application	2011-02-20 16:05:58 +00:00
Paul Bakker	1a207ec8af	- Set sane start values for structures that are closed or freed.	2011-02-06 13:22:40 +00:00
Paul Bakker	e3166ce040	- Renamed ciphers member of ssl_context and cipher member of ssl_session to ciphersuites and ciphersuite respectively. This clarifies the difference with the generic cipher layer and is better naming altogether ... - Adapted in the rest of using code as well	2011-01-27 17:40:50 +00:00
Paul Bakker	b96f154e51	- Fixed copyright message	2010-07-18 20:36:00 +00:00
Paul Bakker	84f12b76fc	- Updated Copyright to correct entity	2010-07-18 10:13:04 +00:00
Paul Bakker	6796839695		2010-07-18 08:28:20 +00:00
Paul Bakker	fc8c4360b8	- Updated copyright line to 2010	2010-03-21 17:37:16 +00:00
Paul Bakker	1f3c39c194	- Removed copyright line for Christophe Devine for clarity	2010-03-21 17:30:05 +00:00
Paul Bakker	43f7ff6906	- Removed debug print	2010-03-18 20:10:27 +00:00
Paul Bakker	f80d4539d1	- Small fix to initialize value	2010-03-16 21:16:04 +00:00
Paul Bakker	ff60ee6c2a	- Added const-correctness to main codebase	2010-03-16 21:09:09 +00:00
Paul Bakker	9caf2d2d38	- Added option parsing for ssl_client2 to select host and port	2010-02-18 19:37:19 +00:00
Paul Bakker	77b385e91a	- Updated copyright messages on all relevant files	2009-07-28 17:23:11 +00:00
Paul Bakker	40ea7de46d	- Added CRL revocation support to x509parse_verify() ... - Fixed an off-by-one allocation in ssl_set_hostname() - Added CRL support to SSL/TLS code	2009-05-03 10:18:48 +00:00
Paul Bakker	d98030e7d6	- Added prelimenary CRL parsing and info support	2009-05-02 15:13:40 +00:00
Paul Bakker	0e6975b7ed	- Fixed use of correct ca certificate (test_ca_cert) instead of xyssl_ca_cert	2009-02-10 22:19:10 +00:00
Paul Bakker	785a9eeece	- Added email address to header license information	2009-01-25 14:15:10 +00:00
Paul Bakker	e0ccd0a7c3	- Updated Copyright notices	2009-01-04 16:27:10 +00:00
Paul Bakker	b749d68f9c	- Updates to PolarSSL ... - Added ignores	2009-01-04 16:08:55 +00:00
Paul Bakker	40e46940df	- First replacement of xyssl by polarssl where needed	2009-01-03 21:51:57 +00:00
Paul Bakker	5121ce5bdb	- Renamed include directory to polarssl	2009-01-03 21:22:43 +00:00